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Abstract 



Can easy sets only have easy certificate schemes? In this paper, we study the class of 
sets that, for all NP certificate schemes (i.e., NP machines), always have easy accep- 
tance certificates (i.e., accepting paths) that can be computed in polynomial time. We 
also study the class of sets that, for all NP certificate schemes, infinitely often have easy 
acceptance certificates. 

In particular, we provide equivalent characterizations of these classes in terms of 
relative generalized Kolmogorov complexity, showing that they are robust. We also 
provide structural conditions — regarding immunity and class collapses — that put upper 
and lower bounds on the sizes of these two classes. Finally, we provide negative results 
showing that some of our positive claims are optimal with regard to being relativizable. 
Our negative results are proven using a novel observation: we show that the classical 
"wide spacing" oracle construction technique yields instant non-bi-immunity results. 
Furthermore, we establish a result that improves upon Baker, Gill, and Solovay's clas- 
sical result that NP / P = NP n coNP holds in some relativized world. 

1 Introduction 

Borodin and Demers [ BD76| ] proved the following result. 



Theorem 1.1 QBD76| ] If NP n coNP ^ P, then there exists a set L such that 

1. leP, 

2. L C SAT, and 

3. For no polynomial-time computable function / does it hold that: for each F € L, f(F) 
outputs a satisfying assignment of F. 

That is, under a hypothesis most complexity theoreticians would guess to be true, it follows that 
there is a set of satisfiable formulas for which it is trivial to determine they are satisfiable, yet it is 
hard to determine why (i.e., via what satisfying assignment) they are satisfiable. 

Motivated by their work, this paper seeks to study, complexity-theoretically, the classes of sets 
that do or do not have easy certificates. In particular, we are interested in the following four 
classes. EASYy is the class of sets L such that for each NP machine M accepting them, there 
is a polynomial-time computable function Jm such that for each x € L, Jm{x) outputs an accept- 
ing path of M(x). That is, EASYy is the class of sets that for all certificate schemes, have easy 
certificates for all elements of the set. We can analogously define EASY^, EASY^I, and EASY?. 
However, we note that EASYy = P and EASY? equals the class of non-P-immune NP sets. Re- 
garding the two EASY^ classes, we provide equivalent characterizations of the classes in terms of 
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relative generalized Kolmogorov complexity, showing that they are robust. We also provide struc- 
tural conditions — regarding immunity and class collapses — that put upper and lower bounds on the 
sizes of these two classes. Finally, we provide negative results showing that some of our positive 
claims are optimal with regard to being relativizable. Our negative results are proven using a novel 
observation: we show that the classical "wide spacing" oracle construction technique yields instant 
non-bi-immunity results. Furthermore, we establish a result that improves upon Baker, Gill, and 
Solovay's classical result that NP ^ P = NP n coNP holds in some relativized world [ BGS75 ], and 
that in addition links their result with the above-stated result of Borodin and Demers. 



2 Definitions and Robustness 

For the standard notations and the complexity-theoretical concepts used in this paper we refer to 



some standard text book on computational complexity such as [ |HU79| , pDGj |BC93| , [Pap94| ]. Fix 
the alphabet £ = {0, 1}. S* is the set of all strings over S. For each string u € £*, \u\ denotes 
the length of u. The empty string is denoted by e. As is standard, the notation 3 10 x (respectively, 
V ae x) means "there exist infinitely many x" ("for all but finitely many x"). For each set L C £*, 
||L|| denotes the cardinality of L and L = S* — L denotes the complement of L. For any class C of 
sets, define coC = {L | L G C}. L =n (L- n ) is the set of all strings in L having length n (less than 
or equal to n). Let S n and S- n be shorthands for (S*) =n and (S*)^ n , respectively. Let FINITE be 
the class of all finite sets. To encode a pair of strings, we use a polynomial-time computable, one- 
one, onto pairing function, (•,•):£* X £* — > £*, that has polynomial-time computable inverses. 
Denoting the set of non-negative integers by IN and using the standard correspondence between S* 
and IN, we will view (•, •) also as a pairing function mapping IN x IN onto IN. Let <i ex denote the 
standard quasi-lexicographical ordering on £*, that is, for strings x and y, x <i ex y if either x = y, 
or \x\ < \y\, or (|x| = \y\ and there exists some zeS* such that x = zOu and y = zlv). x <i ex y 
indicates that x <i ex y but x ^ y. 

We will abbreviate "polynomial-time deterministic (nondeterministic) Turing machine" by 
DPM (NPM). For any Turing machine M, L(M) denotes the set of strings accepted by M, and 
the notation M(x) means "M on input x." For any oracle Turing machine M and any oracle set A, 
L(M A ) denotes the set of strings accepted by M relative to A, and the notation M A (x) means 
"M on input x." For any NPM N and any input x, we assume that all paths of N(x) are suitably 
encoded by strings over E. An NPM N is said to be normalized if there exists a polynomial q 
such that for all n, q(n) > n and, on each input of length n, all paths of length q(n) exist in the 
computation of N(x), and N(x) has only paths of length q{n). Unless otherwise stated, all NPMs 
considered in this paper are required to be normalized. For any NPM N and any input x, we denote 
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the set of accepting paths of N(x) by accjy(x). 

P (respectively, NP) is the class of all sets that are accepted by some DPM (NPM). Let P^ 
denote the class P — FINITE of all infinite P sets. FP denotes the class of all polynomial-time 
computable functions. For any complexity class C, a set L is said to be C-immune if L is infinite 
and no infinite subset of L is in C. Let C-immune denote the class of all C-immune sets. A set L is 
said to be C-bi-immune if both L and L are C-immune. Let C-bi-immune denote the class of all C- 
bi-immune sets. For classes C and T> of sets, V is said to be C-immune (respectively, C-bi-immune) 
if T> H (C-immune) ^ (respectively, if V n (C-bi-immune) ^ 0). 

As a notational convention, for any NPM N, we will say "N has always (respectively, N has 
infinitely often) easy certificates" to mean that (the encoding of) an accepting path of N(x) can 
be printed in polynomial time for each string x G L(N) (respectively, for infinitely many x G 
L(N)). Similarly, we will say "N has only (respectively, N has infinitely often) hard certificates" 
to mean that no FP function is able to output (the encoding of) an accepting path of N(x) for 
each string x G L(N) (respectively, for infinitely many x G L(N)). This is more formally stated in 
Definition [O] below that introduces the classes EASY^, EASY^,, EASYy, and EASYf, of sets for 



which all (or some) NP certificate schemes accepting the set have always (or infinitely often) easy 
certificates. 

Definition 2.1 Let L C S* be a set. 
Lie EASY^ if and only if 

(a) L G NP, and 

(b) (VJV) [(N is NPM with L(N) = L) (3f N G FP) (Vx G L) [/y(z) G accjv(x)]]. 

2. L G EASY^, if and only if either L is finite, or 

(a) L G NP, and 

(b) (VAT) [(iV is NPM with L(iV) = L) => (3f N G FP) (3 io x G L) [/^(x) G acc N (x)]}. 

3. L G EASY^ if and only if 

(a) L G NP, and 

(b) (3NPM N) [L(N) = L A (3/jv G FP) (Vx G L) [f N (x) G accjv(x)]]. 

4. L G EASYp if and only if either L is finite, or 

(a) L G NP, and 

(b) (3NPM N) [L{N) = L A (3/jv G FP) (3 io x G L) [f N (x) G accjy(x)]]. 
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Remark 2.2 1. It is easy to see that both EASYy and EASY 3 contain all finite sets. On the 
other hand, the EASY- G ' classes are defined so as to also contain all finite sets; this is just 
for uniformity and since we feel that it is reasonable to require that the finite sets satisfy 
any suggested notion of "easy sets." Note that the EASY; D ' classes capture the idea that 
sets having correct NP programs for all inputs may have easy to compute NP certificates 
just on infinitely many inputs, while possibly having only hard to compute NP certificates 
on infinitely many other inputs. Let us give some more motivation for these two classes. 
In particular, we are interested in comparing the "io" notions with the corresponding "V" 
notions. While EASY 3 turns out to be a class that is reasonably characterizable in terms 
of immunity (cf. Theorem 23. | below), EASY^, plays an important role for intermediate 



conditions between certain immunity and other statements belonging to the implications that 
will be proven as the main results of the next section and that are summarized in Figure ^[ 

Note also that we can analogously define EASY^, and EASY 3 e by using the quantification 
"V ae x £ L" rather than "Vx G L" in Parts [j] and ^| of the above definition. However, since the 
classes EASYy and EASY 3 (as are most complexity classes) are closed under finite variations, 
it is clear that EASY^ = EASY^ and EASY 3 e = EASY 3 -. Moreover, we show below that 
EASY 3 , = P and that EASY 3 , equals the class of all non-P-immune NP sets, and we therefore 
will not further discuss these two classes in this paper. 



Theorem 2.3 1. FINITE C EASY^ C EASYf C EASY 3 , C NP. 

2. EASY^ C EASY 3 C EASY 3 ,. 

3. EASY 3 , = P. 

4. EASY 3 = P-immune n NP. 



Proof. @ & (g) The inclusions immediately follow from Definition 11 



(||) The inclusion P C EASY 3 holds by definition. The converse inclusion EASY 3 C P also 
is clear, since if L is any set in EASY 3 and this is witnessed by NPM and FP function /jy, then 
there exists a DPM M that recognizes L as follows. On input x, M simulates that computation path 
of N(x) that is printed by /at(x). If x € L, then /n{x) € accjy(x), and M accepts x. If x £ L, 
then Jn{x) cannot be an accepting path of N(x), and thus M rejects x. 

(@) Let L € EASY 3 via NPM N and FP function f N . Clearly, L £ NP, and if L is not a finite 
set, then the set 

{x G L | /n{x) = y and N(x) accepts on path y } 
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Figure 1: Inclusions between classes of NP sets having easy certificates. 



is an infinite subset of L that is in P. Hence, L is not P-immune. 

Conversely, let A be any NP set that is not P-immune. Let Ma be an NPM accepting A. If 
A is finite, then we are done. So suppose A is infinite, and there is an infinite set B such that 
B C A and B e P via DPM Mb. We now describe an NPM N and an FP function f N that witness 
A G EASYj^,. On input x, N first simulates the computation of Mb{x), and accepts x if Mb accepts 
x. If Mb rejects x, then N simulates the computation of Ma(x). Clearly, L(N) = A. /tv(x) is 
defined to be the (suitably encoded) computation of Mb(x). Since B is an infinite set, /jv(x) prints 
an accepting path of N(x) for infinitely many x £ A. □ 

The inclusion relations between FINITE, NP, and all four classes of easy NP sets (EASYy, 
EASY^, EASY^, , and EASY^) are displayed in Figure |. 

The Kolmogorov complexity of finite strings was introduced independently by Kol- 
mogorov [Kol65] and Chaitin [Cha66]. Roughly speaking, the Kolmogorov complexity of a finite 
binary string x is the length of a shortest program that generates x. Intuitively, if a string x can be 
generated by a program shorter than x itself, then x can be "compressed." The notion of generalized 
Kolmogorov complexity ([ Adl79 , Har83 , [Sip83 ], see the paper of Li and Vitanyi [ p/90 ] for a nice 
survey of the field) is a version of Kolmogorov complexity that provides information about not only 
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whether and how far a string can be compressed, but also how fast it can be "restored." We now 
give the definition of (unconditional and conditional) generalized Kolmogorov complexity. 



Definition 2.4 ([ Har83 ], see also [ ]Adi79| , [Sip83l l) For any Turing machine T and functions s 
and t mapping IN to IN, define 



Ky[s(n), t(n)] = {x \ (By) [\x\ = n and \y\ < s(n) and T(y) outputs x in at most t[n) steps ]}. 



It was shown in [ Har83 ] that there exists a universal^ Turing machine U such that for any other 
Turing machine T there exists a constant c such that 

K T [s(n),t(n)} C Ky[s(n) + c, ct(n)logt(n) + c]. 

Fixing a universal Turing machine U and dropping the subscript, the unconditional generalized 
Kolmogorov complexity will be denoted by K[s(n),t(n)] = Kjj[s(n),t(n)]. The conditional gen- 
eralized Kolmogorov complexity (under condition z), in which the information of the string z is 
given for free and does not count for the complexity, is defined as follows. 



Definition 2.5 Let U be a fixed universal Turing machine and z be a string. For functions s and t 
mapping IN to IN, define 

df 



K[s(n),t(n) 



{x | (By) [\x\ = n and \y\ < s(n) and U((y, z)) outputs x in < t(n) steps]}. 



In particular, K[s(n), t(n) | e] = K[s(n), t(n)]. 

Of particular interest in this paper are certificates (more precisely, strings encoding accept- 



ing paths of NPMs) that have small generalized Kolmogorov complexity. Levin (see [Tra84]) and 



Adleman [ Adl7S ] independently discovered the connection between small generalized Kolmogorov 



complexity and certificates. This connection has also been used in other contexts ( QHW91D , see also 
[ pR90[ |GT9T| ] and the comments in pR90| ] on [ |CH89| ]). 



Definition 2.6 [ HY84 ] A set S is V-printable if there exists a DPM M such that for each length n, 
M on input l n prints all elements of S having length at most n. 

The P-printable sets are closely related to sets of strings having small unconditional generalized 
Kolmogorov complexity: A set S is P-printable if and only if S G P and S C K[k log n, n k ] for some 



constant k ([ AR88], see also [BB86, HH88, Rub86]). Below we note a similar connection between 



1 Roughly speaking, a universal Turing machine U expects as input a pair of a (suitably encoded) Turing machine T 
and an input string y and simulates the computation of T(y). More precisely, denoting the encoding of T by code(T) 
and using our pairing function, U runs on input (code(T), y) and outputs the result of the computation of T(y). 
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the sets in EASYy and EASY^, and the sets of certificates having small conditional generalized 
Kolmogorov complexity, thus showing the robustness of these notions. Due to Theorem ^3| , the 
corresponding claims for EASYy and EASYj^ are omitted. Though the flavor of the correspondence 



here invoked is by now standard (e.g., see the above papers), we include the proof of Observation 2.7 
for completeness. 

Observation 2.7 The following are equivalent: 

1. L G EASY^. 

2. For each normalized NPM N accepting L there is a constant k (which may depend on N) 
such that for each string x G L it holds that acc n {x) n K[k log n, n k \x}^ 0. 

Proof. In one direction the function proving a machine easy itself yields Kolmogorov-simple 
certificates. That is, for any normalized NPM N accepting the given EASY^ set L, there is an FP 
function /at that outputs an accepting path of N(x) for each x G L. Thus, for each x G L, the 
certificate /at (a?) is in K[k log n, n k \ x] for some constant k depending only on fjy (and thus on N), 
since the program for f^, encoded as a string y, has constant size, and the universal Turing machine 
U running on input (y, x) can clearly generate /n{x) in time polynomial in \f^(x)\. 

In the other direction, let N be any NPM accepting L. By assumption, for each x G L, N(x) 
has certificates of small conditional Kolmogorov complexity relative to x (i.e., it has certificates in 
K[k log n,n k \ x] for some constant k). Note that n, the length of those certificates, is polynomial 
in let p be some such polynomial bound. So, for each x, n = p(\x\) is a polynomial bound on 
the length of the certificates of N(x). There are at most 2 c '( lo s n ) = n l (for some suitable constant £) 
short strings that potentially encode programs y such that the universal Turing machine U, running 
on input (y, x), produces a certificate of N(x) in time polynomial in n, say in time n m = (p(\x\)) m . 
Letg(|x|)Iniax{(p(|x|))',(p(|x|)r}. 

The function fx proving N easy works on input x as follows. In a brute-force manner, /jy runs 
the universal machine on the pairs (y, x) for all the at most q{\x\) many short strings y, \y\ < k log n, 
for q(\x\) steps, and then for each output checks if the output is an accepting path of N(x), and 
eventually outputs the first such accepting path found. If no accepting path was found, the input x is 
not in L. Clearly, is polynomial-time computable and, for each input x G L, outputs a certificate 
ofA(x). □ 

Remark 2.8 Note that the normalization requirement in the above observation is crucial, since 
our definition of conditional generalized Kolmogorov complexity displays the strange feature that 
for machines that are not normalized, if we use a certain simple polynomial-time computable and 
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polynomial-time invertible pairing function, say (•, ^weird. to encode the pair of the program y and 
the condition z as input (y, z) W eird to the universal Turing machine, then even the empty string has 
non-constant conditional Kolmogorov complexity. Due to our normalization requirement, however, 
this issue is not germane here. 



The proof of Observation 2.9 follows precisely the lines of the proof of Observation 2.7 



Observation 2.9 The following are equivalent: 

1. Le EASY?. 

2. For each normalized NPM N accepting L there is a constant k (which may depend on N) 
such that for infinitely many strings x € L it holds that acc^x) n K[k log n, n k \ x] ^ 0. 

3 Positive Results 

In this section, we prove a number of implications between certain properties of subclasses of NP 
that are summarized in Figure ||. Usually, when one is trying to give strong evidence for some 
complexity-theoretic statement A not to be true, one does so by showing that A implies P = NP. In 
contrast, our Figure |2] has P ^ NP as its top conclusion. Nonetheless, the implications of Figure || 
are not meaningless. Their importance is obvious in light of the fact that the statements of the figure 
(in particular, the immunity assertions and P ^ NP n coNP as well as the condition P / EASYy, 
which is equivalent to the existence of surjective one-way functions (see [ pFNR96 ])) are well- 



studied and important conditions in complexity theory. The implications of Figure ^ simply state 
that these conditions are at least as hard to prove as proving P ^ NP, and they explore the logical 
fine-structure amongst those important conditions. 

Here is the key for Figure ||: Implications represented by arrows that are marked by a "*" are 
not invertible up to the limits of relativizations (as will be shown in Section Consequently, no 
chain of implications that contains an arrow marked by a "*" is invertible in all relativized worlds. 
Arrows labeled by boldface numbers indicate non-trivial implications to be proven in Theorem 

We first discuss the trivial implications of Figure ||. We stress that these trivial statements are 
included not only in order to make the picture displayed in Figure || as complete as possible, but 
also for the following reason. In the next section, we will prove that the reverse of some implication 
chains comprising both trivial and more interesting implications (the latter ones being stated in 
Theorem [T2| below) not only fails in some relativized worlds, but, even worse, this relativized 
failure can already be shown for the trivial part of the implication chain considered. Therefore, it 
does make sense to explicitly state such trivial implications. 
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(4) 



There is a set 
having no infinite 
P-printable subset 

(3) 

EASY? ^ NP 



(2) 



NP is P-immune 



(9a) 



P ^ NP 



(6) 



P £ EASY^ 



EASY^ = FINITE 




EASY*, C FINITE U (NP - P) 



(8) 



EASY^, C FINITE U (NP - coNP) 



(7) 



P ^ NP n coNP 



(la) 



EASY? = FINITE 



(lb) 



NP n coNP is P-bi-immune 




Figure 2: Some implications between various properties of (classes of) sets within NP. 



9 



These trivial facts are either immediately clear, or they follow from simple set-theoretical argu- 



ments, or are straightforwardly established by the equivalences given in Proposition [3JJ below. For 
instance, the equivalence of "EASY^ = FINITE" and "EAS C FINITE U (NP - P)" can be seen 
by simple set-theoretical considerations]^] The statement "EASYy = FINITE," in turn, immediately 
implies the statement "P %. EASYy" (see arrow (10) in Figure We have been informed that the 



authors of [ FFNR96| ] have shown a number of very interesting conditions, including "X* EASYy" 



and "there exists an honest polynomial-time computable onto function that is not polynomial-time 
invertible," to be all equivalent to the statement "P % EASYy." 

Furthermore, the arrows in Figure || labeled (la), (lc), (7), and (8) are immediately 
clear. Concerning the arrows (9a) and (9b), note that (9b) follows from the equivalence 
of "EASY^ = FINITE" and "EASY^ C FINITE U (NP - P)" stated in the previous paragraph, 



whereas (9a) is implied by Proposition 3.1.2 below. Similarly, arrow (6) holds due to Proposi- 



tion [OP, since if P % EASY^, then there exists a set in NP - EASY^, and thus we have P / NP. 



The following proposition gives characterizations for two nodes of Figure |[ 

Proposition 3.1 1. P + NP if and only if EASY^ ^ NP. 

2. EASYf D C FINITE U (NP - P) if and only if S* EASY? . 



Proof. (TO) Adleman ([Adi79], see also [Ira84] for a discussion of Levin's related work) has 



shown that P = NP if and only if for each normalized NPM M there is a A; such that for each string 
x G L(M) it holds that acc^C^) nK[/clogn,n fc | x] ^ 0. By Observation 17, this implies that 
P = NP if and only if EAS Y^ = NP. 

(@) First note that the statement "EASY^ C FINITE U (NP - P)" is equivalent to 
"EASY^ HPoo = 0," and thus immediately implies £* g" EASY^,, since clearly £* G P^. For 
the converse implication, assume there exists a set L in EASY^ n Poo- Let Ml be a DPM such 
that L(M L ) = L. We show that S* G EASY^ . Let N be any NPM such that L(N) = S*. By 
way of contradiction, suppose N has easy certificates only for finitely many x G £*. Consider the 
following NPM Nl for L. On input x, Nl first simulates the computation of N(x), and then, for 
every path of this simulation, Nl simulates Ml(x) and accepts accordingly. Clearly, L(Nl) = L. 
However, by our supposition that N has easy certificates for finitely many inputs only, Nl also 
can have easy certificates for at most finitely many inputs, contradicting that L G EASY^,. Thus, 
S* G EASY^ . This completes the proof. □ 

Next, we prove the non-trivial implications of Figure ||[ 

2 To be definite, for all sets A, B, C, and I.ifiCICBC C, then (X = A X C A U (C - B)). Taking 

A = FINITE, B = P, C = NP, and X 
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Theorem 3.2 1. If NP n coNP is P-bi-immune, then EASY^, = FINITE. 

2. If NP is P-immune, then EASY^, ^ NP. 

3. If EASY^, 7^ NP, then there exists an infinite P set having no infinite P-printable subset. 



4. [ A1192 ] If there exists an infinite P set having no infinite P-printable subset, then P ^ NP. 



5. [ pD76| l If NPHcoNP ^ P, then P % EASY^. 



Proof. ([]]) Let Q be any P-bi-immune set such that QeNPn coNP via NPMs Nq and i%, that 
is, L(Nq) = Q and L(Nq) = Q. By way of contradiction, assume there exists an infinite set L in 
EASY? . Let N be any NPM accepting L. Consider the following NPM N for L. Given x, N runs 
N(x) and rejects on all rejecting paths of N(x). On all accepting paths of N(x), N nondeterminis- 
tically guesses whether x G Q or x G Q, simultaneously guessing certificates (i.e., accepting paths 
of Nq(x) or Nq(x)) for whichever guess was made, and accepts on each accepting path of Nq(x) 
or Nq(x). Clearly, L(N) = L. By our assumption that L is an infinite set in EASY^,, N has easy 
certificates for infinitely many inputs. Let /~ be an FP function that infinitely often outputs an easy 
certificate of N. Let 

L = {x | ffi(x) outputs an easy certificate of N(x)}. 

Note that L is an infinite subset of L, and that for any input x, it can be checked in polynomial time 
whether x belongs to Q n L or Q n L, respectively, by simply checking whether the string printed 
by /~ indeed certifies either x*EQPiL or x^QnL. Thus, either Q n L or Q n L must be an 
infinite set in P, which contradicts that Q is P-bi-immune. Hence, every set in EASY^, is finite. 

(|J) Let L be any P-immune NP set. We claim that L EASY^. Suppose to the contrary that 
L G EASYf . Let N be any NPM accepting L. Then there exists an FP function /jy such that 
/jv(x) S accAr(x) for infinitely many inputs x. Define 

^ = {x | /at(x) G accAr(x)}. 

Then, B is an infinite subset of L and B GP, contradicting the P-immunity of L. 

(|) If EASY^, / NP, then there exist an infinite NP set L and an NPM N accepting L such that, 

(*) (V/ G FP) (V ae x G L) \f{x) acc^(x)] . 

Let q be a polynomial such that \ (x, y)\ = q(\x\) for any string x and any path y of N(x). Define 

D = {(x,y) \ y G accAr(x)}. 
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Clearly, D is an infinite set in P. Suppose there exists an infinite set A such that A C D and 
A is P-printable via some DPM M. Define an FP function Ja that is computed by DPM Ma as 
follows. On input x, Ma simulates the computation of M(l g (' x '>) and prints all elements of A up 
to length If a string of the form (x, y) is printed, Ma outputs y. Clearly, /a(^) G accjv(x) 

for infinitely many x G L, contradicting (*) above. Hence, D has no infinite P-printable subset. 

(|]) This implication can be seen from results due to Allender [ A1192j ]. First, some definitions 



are needed. Let us consider another version of time-bounded Kolmogorov complexity, a version 
that is due to Levin [ |^ev84 ] (see also J^ev73 ]). For the fixed universal Turing machine U and any 



string x, define Kt(x) to be 

min{|y| + logra | U(y) outputs x in at most n steps }. 

For any set L, let Kl(ti) = min{Kt(3;) | x G L =n }. As is standard, let E and NE denote respectively 
U c>0 DTIME(2 cn ) and U c>0 NTIME(2 cn ). An NE predicate is a relation R defined by an NE 
machine M: R(x, y) is true if and only if y encodes an accepting path of M(x). An NE predicate 
R is E-solvable if there is some function / computable in time 2 cn for some constant c such that 
(Vx)[(3y)[R(x,y)} <=> R(x,f(x))]. 

In [ ]A1192| ], Allender proves that (a) there exists an infinite P set having no infinite P-printable 
subset if and only if there exists a set B G P such that Kg(n) G w(log re), and (b) there exists an NE 
predicate that is not E-solvable if and only if there exists a set C G P such that Kc(rt) g" O(logn). 
Since K#(n) G w(logre) clearly implies Kb (re) O(logre) and since the existence of an NE 
predicate that is not E-solvable implies P ^ NP, (|j) is proven. 

For completeness and to enhance readability, we add a more transparent direct proof of @. To 
prove the contrapositive, assume P = NP. Let L be any infinite set in P. Define the set 

A = {{0 n ,w) | re > A M = re A (3z G L =n ) [z < lex w}}. 

Clearly, A G NP, and by our assumption, A G P. Define the set of the lexicographically smallest 
length n strings of L for each length n: 

S^{xeL\(VyeL=W)[x < lex y]}. 

Clearly, S is an infinite subset of L. Furthermore, S is P-printable, since we can find, at each 
length n, the lexicographically smallest length n string in L (which is the length n string of S) 
via prefix search that can be performed in FP" 4 = FP. Thus, every infinite set in P has an infinite 
P-printable subset, as was to be shown. 

(||) The proof of this result is implicit in the most common proof (often credited as Hartmanis's 
simplification of the proof of Borodin and Demers) of the theorem of Borodin and Demers [ BD76 ], 
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here stated as Theorem [TTT] (see [ Sel88 ] for related work bearing upon the theorem of Borodin and 



Demers), as has been noted independently of the present paper by Fenner et al. [ ]FFNR96| ]. For 
completeness, we include the proof that NP n coNP / P implies P % EASYy. Let L G NP n coNP 
via NPMs N L and iVp that is, L(N L ) = L and L(N- I ) = L. Assume further that L g" P. Consider 
the following NPM M. On input x, M nondeterministically guesses whether x G L or x G L, 
simultaneously guessing certificates (i.e., accepting paths of Nl(x) or Nj-(x)) for whichever guess 
was made. Now, L(M) = L(N L ) U L(N T ) = LuI = S*. Clearly, S* € P. We claim that (under 
our assumption that L g" P) S* EASYy. Suppose to the contrary that E* G EASYy. Then, for 
the NPM M accepting £*, there exists an FP function Jm that prints an accepting path of M(x) on 
each input x. Hence, L can be decided in polynomial time by simply checking which path of the 
initial branching of M(x) led to acceptance. That is, a DPM for L, on input x, computes /m(^) 
and then checks whether the initial nondeterministic guess of M(x) on the path printed by /m{x) 
was either x G L or x G L, and accepts accordingly. This contradicts our assumption that L g" P. 
Hence, S* EASY^. □ 

Finally, we state an interesting observation by Selman. Recall that P = EASYy if and only if 
S* G EASYy. The following claim gives further characterizations of P = EASYy in terms of the 
question of whether EASYy is closed under complementation. 



Claim 3.3 [Sel95] The following are equivalent. 



1. P = EASY V '. 

2. EASYy is closed under complementation. 

3. There exists a set L in P such that L G EASYy' and L G EASYy'. 

Proof. Clearly, Statement (1) implies (2) and (2) implies (3). Assume L G P, L G EASYy, and 
L G EASYy. Let Mi (respectively, M 2 ) be a DPM that accepts L (respectively, L). Let N be an 
NPM that accepts E*. Define NPM JVi so that on input x, N\ simultaneously simulates N and M\, 
and N\ accepts if and only if both N and M\ accept. Observe that every accepting computation 
of N\ encodes an accepting computation of N. Similarly, define N 2 to simultaneously simulate 
N and M 2 . Then, L(A f i ) = L and L(N 2 ) = L. Thus, there exist fx and f 2 in FP such that 
x G L implies fi(x) is an accepting computation of N\, and x G L implies f 2 (x) is an accepting 
computation of N 2 . Define f(x) = fi{x) if x G L, and f(x) = f 2 (x) if x G L. Then, / G FP and 
for all x, f(x) contains an encoding of a computation of N on x. Thus, S* G EASYy'. □ 

Consider the reverse of arrow (10) in Figure ||, i.e., the question of whether P % EASYy implies 
EASY^ = FINITE. Suppose not. That is, suppose that P / EASY^ ^ FINITE. Then, there is a 
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set L such that L is infinite, L is infinite, L € P, L G EASYy, and L g EASYy. In Corollary [O 
below, we will give an oracle relative to which P ^ EASYy ^ FINITE. Since Claim 3_3 and the 
above comments relativize, in this world, such a set L indeed exists. 



4 Negative Results 

In this section, we show that some of the results from the previous section are optimal with respect 
to relativizable techniques. That is, for some of the implications displayed in Figure ||, we construct 
an oracle relative to which the reverse of that implication does not hold. For instance, from Parts (g) 
and ^ of Theorem 3/2 and the trivial facts that are shown as arrows (la) and (lc) in Figure ||, we 



have the following implication chains: 

1. If NPHcoNP is P-bi-immune, then NP is P-immune, which in turn implies that EASY^, ^ NP, 
and 

2. If NP n coNP is P-bi-immune, then NP n coNP ^ P, which in turn implies that P % EASYy'. 

First, we prove that the reverse of these chains fails to hold in some relativized world, and, 
even worse, that this relativized failure can be shown via proving that not even the trivial parts of 
the chains are invertible for all oracles. For both chains, this result can be achieved via one and 



the same oracle to be constructed in the proof of Theorem 4. 1 below. This relativized world will 



additionally satisfy that the inequalities FINITE ^ EASYy ^ P ^ NP simultaneously hold in this 



world (see Corollary |4.2| ). 

One main technical contribution in the proof of Theorem iA is that we give a novel application 
of the classic "wide spacing" oracle construction technique: We show that this technique instantly 
yields the non-P-bi-immunity of NP relative to some oracle. The use of the wide spacing technique 
dates so far back that it is hard to know for sure where it was first used. It certainly played an 



important role in the important early paper by Kurtz [Kur83] (see also the very early use of wide 



gaps to facilitate the brute-force computation of smaller strings employed by Ladner [£ad75], and 



also in Baker, Gill, and Solovay's seminal work [BGS75] and in Rackoff's oracle constructions for 



probabilistic and unambiguous polynomial time classes jRac82| ]). 

Theorem 4.1 There exists a recursive oracle A such that 

(a) NP A = PSPACE^ 4 , 

(b) NP A is P^-immune, and 

(c) NP A is not P^-bi-immune. 
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Proof. The oracle A will be QBF © B, where QBF is any fixed PSPACE-complete problem and 
the set B is constructed in stages, B = Uj>o Bj- Define the function t and the sets T and for 
k > Oby 

t(0) 1 2, t(j) 1 2 222t<J for j > 1, T fe ^' E'W for fc > 0, and T 1 U> T k . 
The construction of B will satisfy the following requirement: 

BCT and ||S n T k \\ = 1 for each k > 0. (1) 

Fix an enumeration {Mj}j>i of all DPOMs. For each j > 1, let pj be a fixed polynomial bounding 
the runtime of machine Mj. Without loss of generality, assume that our enumeration satisfies for 
all j > 1 that 

i=i 

Note that this can indeed be assumed, w.l.o.g., by clocking the machines with appropriately slow 
clocks as is standard. At stage j of the construction, machines M±, M2, . . . , Mn og ji will be active 
unless they have already been canceled during earlier stages. Define the language 

L B = {0 n \Bn E""^ ^ 0}. 

Clearly, Lb is in NP B and therefore in NP A . Let be the content of £> prior to stage j. Initially, 
let Bo be the empty set. Stage j > of the construction of B is as follows. 

Stage j. 

Case 1: For no active machine Mj does M^ BF ® B ' 3 ~ 1 (0*^^) accept. Choose the smallest string 
G S'(^ _1 such that Wj is not queried in the computation of M J < " !BFe ' B) ~ 1 (0 t ( J )) for any 
active machine Mj. Set := Bj-i U {^j}. 

Case 2: There exists an active machine Mj such that M^ BF ®' B; '~ 1 (0*^^) accepts. Let i be the 
smallest such i. Mark machine M^ as canceled, and set Bj := Bj-i U {1*^}. 

End of Stage j. 

Since we assume our enumeration of DPOMs to be slowed down so that the sum of the runtimes 
of all machines that can be active at stage j and run on input 0*^ is strictly less than 2*^ -1 , 
the string Wj, if needed, indeed exists. In addition, our assumption on having slowed down the 
enumeration of machines combined with the widely spaced gaps between the lengths of the strings 
considered in subsequent stages also guarantees that the single stages of the construction do not 
interfere with each other, since for each stage j, no machine that is active at this stage can reach 
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(and query) any string of length t(j + 1), that is, no oracle extension at later stages can effect the 
computations performed in stage j. 

Note further that Case 1 in this construction happens infinitely often, as each Case 2 cancels a 
machine, but at stage j at most [log j] machines have been active, so Case 2 can happen at most 
[log j] times. Since Case 1 happens infinitely often, it is clear that Lb is an infinite set in NP A . 
It remains to prove that (a) NP A = PSPACE A , (b) NP A is P^-immune, and (c) NP A is not P A -bi- 
immune. 

Statement (a) follows immediately from the form of the oracle A = QBF B and the fact that 
QBF is PSPACE-complete. 

To prove Statement (b), note that each DPOM Mj is either canceled eventually, or Mi is never 
canceled. If Mj is canceled, then we have by construction that 0*^ S L(M A ) for some j, yet 
0* (j) Lb, since B n X^^O = 0. Thus, the language accepted by Mj relative to A, L(M A ), is 
not a subset of Lb- In the other case (i.e., if Mj never is canceled), we will argue that L(M A ) n Lb 
must be a finite set. Indeed, let Sj be the first stage in which all machines Mi, with £ < i, that will 
ever be canceled are already canceled. Then, for no stage j with j > si will M i accept the 

input 0*^, as otherwise Mj would have been the first (i.e., having the smallest number according 
to the enumeration) active machine accepting 0*^ and would thus have been canceled. It follows 
that M A accepts at most a finite number (more precisely, at most Sj — 1) of the elements of Lb- To 
summarize, we have shown that there exists an infinite set in NP" 4 (namely, L b) having no infinite 
subset in P A , that is, NP A is P A -immune. 

Finally, let us prove Statement (c). Suppose there exists an infinite set L in NP A . Define the 
function r by 

r(0) = 2 22 and r(j) = 2 2 ^ ° ' for j > 1. 

Define the sets 

Lin = {0 n | (3j > 0) [r(j) = n A 0" G L}} and L out 1 {0 n | (3j > 0) [r(j) = n A n L}}. 

Clearly, L m C L and L out C L, and either r ^ E L for infinitely many j, or r ^ L for infinitely 
many j, or both. Thus, either L m is an infinite subset of L, or L ou t is an infinite subset of L, or both. 

Now we prove that both L m and L out are in P A . Recall that A = QBF 5 and that B C T 
and n Tfc|| = 1, since the construction of B satisfies requirement ([[]) above. We now describe a 
DPOM M in for which L(M^) = L in . On input x, M A first checks whether x is of the form r(i) 
for some j. If not, M A rejects x. Otherwise, assume x = 

0Hk) for 

some fixed k e IN. Now M A 

constructs a potential query table, Q, of all strings in B that can be touched in the computation 
of the NP A machine accepting L. Note that all strings in B that are smaller than \x\ = r(k) can 
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be found by brute force, since — by definition of the functions r and t — they have lengths at least 
double-exponentially smaller than |sc[. For the same reason, no string in B of length not smaller 
than \x\ can be touched in the run of the NP A machine accepting L, on input x, more than finitely 
often, and all those strings of B n ([Jj>k ^j) tnat indeed are queried in this computation can thus be 
hard-coded into table Q. Therefore, Q contains all information of B that can effect the computation 
of the NP A machine for L on input x. Hence, again employing the PSPACE-completeness of QBF, 
M A can ask the QBF part of its oracle to simulate that computation, using table Q for each query 
to B. If this simulation returns the answer "x G L," then M ia accepts x; otherwise, M m rejects x. 
The proof that L out G P A is analogous and thus omitted. To summarize, we have shown that if 
there exists an infinite set L in NP A , then at least one of L or L must contain an infinite subset 
(specifically, L m or L out ) that is decidable in P A , that is, NP A is not P A -bi-immune. □ 

Note that the oracle A constructed in the previous proof is recursive and is "reasonable," since 
P ^ NP holds relative to A, due to the P^-immunity of NP A . In addition, relative to A, the reverse 
of arrows (la) and (lc) in Figure @ fails and FINITE ^ EASY^ / P, i.e., arrow (10) in Figure | is 
not invertible. 

Corollary 4.2 There exists a recursive oracle A such that 

1. NP A is P A -immune, yet NP A n coNP A is not P^-bi-immune, 

2. NP A n coNP A / P A , yet NP A n coNP A is not P A -bi-immune, 

3. P A £ (EASYy)" 4 , and 

4. (EASY^ 4 n P£ ^ 0. 



Proof. The first two statements follow from Theorem 4T, since the non-P^-bi-immunity of 
NP A clearly implies that NP A n coNP A is not P A -bi-immune. Moreover, since NP A = PSPACE A 
implies that NP A = coNP A , there exists a set in (NP A n coNP A ) - P A by the P A -immunity of NP A . 



Furthermore, since NP A n coNP" 4 / P A , the relativized version of Theorem 3.2 5] establishes the 
third statement of this corollary: P A % (EASYy) A . 

To prove the fourth statement, let A = QBF © B be the oracle constructed in the proof of 



Theorem |4.1[ Recall from that proof the definitions of the functions r and t and of the sets T^, 
k > 0, and T. Recall that the construction of B ensures that the following requirement is satisfied: 
B C T and \\B D T k \\ = 1 for every k > 0. Define the set 

L = {0 r ^\j >0}. 



Clearly, L is an infinite set in P, and therefore in P 



A 
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Let N be any NPOM from our fixed enumeration of all NPOMs (see the proof of Theorem p~T| ) 
that, with oracle QBF05, accepts L, i.e., L(N QBF ® B ) = L. To show that N, with oracle QBF©f?, 
has always easy certificates, we will describe a DPOM M that computes, using oracle QBF© B, an 
ppQBFes f unc tion such that /jv prints an accepting path of N^ BF ® B (x) for each x G L. 

On input x of the form r ^> for some j, M computes by brute force a potential query table, Q, 
of all "short" strings in B, i.e., Q = B <r 0') = B- l ^\ and then employs the PSPACE-completeness 
of QBF to construct, bit by bit, the lexicographically first accepting path of N^ BF ® B (x), say p, 
via prefix search, where table Q is used to answer all queries to B. Since by definition of r and t, 
\x\ = r(j) is at least double-exponentially smaller than any string of length > t(j), no string in B of 
length > t(j) can be queried in the run of N^ BF ® B (x) more than finitely often, and all those strings 
in B n (\Ji>t(j) Ti) that indeed are queried in this computation can thus be hard-coded into table Q. 
Therefore, Q contains all information of B that can effect the computation of N^ BF ® B (x). It 
follows that the path p constructed by M^ BF<sB (x) indeed is a valid accepting path of N® BF ® B (x). 
M outputs p. Hence, L € (EASY^) A . This establishes our claim that (EASY^) A n P^ + 0- D 



Remark 4.3 In fact, it is not hard to see that, via using a Kolmogorov complexity based oracle 
construction, we can even prove the following claim that is stronger than Corollary [0|.[3| above: 
There exists an oracle D such that P D <2 (EASY^,) 13 . To be a bit more precise, in this proof, the set 
L = {0*^ | j > 0} is clearly a P set (and thus, L E V x for any X), but we can construct an oracle 
set D such that there exists an NPOM N with L(N D ^ - T atD 
everywhere, i.e., L (EASY^ ) D . 



L, yet N has only hard certificates almost 



Baker, Gill, and Solovay proved that there exists an oracle E relative to which V E ^ NP Z 



yet P E = NP E n coNP s [BGS75]. Due to the priority argument they apply, this proof is the most 



complicated of all proofs presented in their paper. Next, we show that an adaptation of their proof 
yields the stronger result that the implication (P ^ NP => P % EASYy) (which is the reverse of 
arrow (6) in Figure ||) fails in some relativized world. It is worth noting that thus already the trivial 
part of the implication chain (P / NP n coNP => P % EASY^) and (P % EASY^ => P ^ NP) 
(arrows (5) and (6) in Figure f|) is shown to be irreversible up to the limits of relativizing tech- 
niques. Furthermore, by inserting into the obvious implication (P ^ NP n coNP P ^ NP) the 
statement "P % EASYy,"| we have, on the one hand, enlightened the close connection between the 
famous classic results of JBGS75| ] and [ ]BD76p . On the other hand, having inserted "P % EASY^" 
into this implication clearly distinguishes the domains where the hard, non-trivial cores of the proofs 



of the respective results in [BGS75] and [ BD76| ] fall into. 



3 We stress that it is non-trivia l to sho w that this insertion indeed is possible, due to the commonly agreed non-triviality 
of Borodin and Demers's result [ BD7(: ] (see Theorem |TT| and the proof of Theorem 3.2.j|), 
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Theorem 4.4 There exists a recursive oracle A such that NP A ^ P A = (EASYy) A . 



Corollary 4.5 [pGS75[] There exists a recursive oracle A such that NP A ^ P A = NP A n coNP A . 



Proof of Corollary |4.5|. This follows from Theorem 4.4 and the fact that the proof of 



Theorem |3.2|.^| relativizes, that is, stating the contrapositive of Theorem 3^. |: For every oracle B, 



if P B C (EASYy)- 8 , then P B = NP B n coNP B . □ 

Proof of Theorem 0. The oracle A will again be QBF B, where QBF is any fixed PSPACE- 
complete problem, B = U«>o B n i s constructed in stages, and for every n > 0, -B n _i denotes 
the content of B prior to stage n. Initially, set Bo to be the empty set. To make clear how to 
construct B, we will recall the crucial parts of Baker, Gill, and Solovay's oracle construction in the 



proof of [ ]BGS75| , Theorem 6] , pointing out the differences to our construction. 

As in QBGS75D , define the function e by e(0) = 2 and e(j) = 2 2e( '" 1) for j > 1. At stage n of 
the construction, at most one string of length e(n) is added to B so as to simultaneously ensure both 
P A ^ Np A and p A ^ ( E ASY^) A . 

Fix an enumeration {Mj}j>i of all DPOMs and an enumeration {Nj}j>i of all NPOMs. For 
each j > 1, let pj be a fixed polynomial bounding the runtime of both Mj and Nj. Define the 
language 

L B = {0 n \(3w) [w£B= n ]}. 

Clearly, L B is in NP B , and therefore in NP A . 

There are two types of requirements to be satisfied in the construction of B. Intuitively, satisfy- 
ing a requirement of the form (i, i) will ensure that L(M A ) ^ Lb- Thus, satisfying (i, i) for each 
i > 1 will establish our claim that P A ^ NP A . On the other hand, satisfying a requirement of the 
form (j, k) with j ^ k will ensure that L(N A ) / L(M A ), and N A is thus not a machine accepting 
the P A set L(M A ). Therefore, showing that N A has always easy certificates for every requirement 
(j, k) with j ^ k that is never satisfied (and thus the equality L(N A ) = L(M A ) might happen) will 
suffice to establish our claim that P A C (EASYy) A . 

In more detail, an unsatisfied requirement (i, i) is vulnerable at stage n of the construction of B 
if pi(e{n)) < 2 e ( n \ An unsatisfied requirement (j, k) with j ^ k is vulnerable at stage n if there 
exists a string x such that 

e(n — 1) < log \x\ < e(n) < m&x{pj(\x\),pk(\x\)} < e(n + 1) (2) 

and in addition it holds that x G L(M ? QBF ® B "" 1 ) if and only if x £ L(^ BFeBn - 1 ). We note that 
the definition of vulnerability for this second type of an unsatisfied requirement is different from 
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that given in the proof of [ BGS75 , Theorem 6]. By convention, we agree that requirement R\ has 
higher priority than requirement R2 exactly if R\ < R2. Stage n > of the construction of B is as 
follows. 

Stage n. The requirement of highest priority that is vulnerable at stage n will be satisfied. To sat- 
isfy requirement (j, k) with j ^ k, we simply add no string to B in this stage, i.e., B n := B n _\. To 
satisfy requirement (i, i), simulate the computation of jVf9 BF ® s ™ _1 (o e ( n )). If it rejects, then let w n 
be the smallest string of length e(n) that is not queried along the computation of M 4 (0 e( - n ' ), 

and set B n := B n ^ U {w n }. If BF0B "- 1 accepts e ( n ), then set B n := B n - V 
End of Stage n. 

Each requirement (i, i) is eventually satisfied, since there are only finitely many requirements 
of higher priority. Suppose requirement (i, i) is satisfied at stage n. Then, since (i, i) is vulner- 
able at stage n, we have Pi(e(n)) < 2 e<yTl \ This implies that the string w n , if needed to be added 
to B in stage n, must exist, and further that no string in B of length > e(n) can be touched in 
the run of M A {0 e ^). Since by construction also w n is not queried by M A (0 e ^), we conclude 
that oracle extensions at stages > n do not effect the computation of j^9 BF ® s ' l ~ 1 (0 e ( n )). Hence, 
e M g L(M? BFeB ) if and only if 0< n ^ L(M^ BF ® jBn - 1 ) if and only if there exists some string 
w n G £= e (™) if and only if e (") G L B ; so L(M? BmB ) ^L B .It follows that L B G NP A - P A . 

It remains to prove that P A C (EASYy) A . The remainder of this proof is different from the 
proof in JBGS75| ]. Given any pair of machines, Mj and Nj. with j 7^ k, we will show that either 
L(N A ) L(M A ), or N A has always easy certificates, thus proving that for every set in P A , each 
NP A machine accepting it has always easy certificates, in symbols, P A C (EASYy)" 4 . 

Clearly, each requirement (j, k) with j ^ k is either satisfied eventually, or (j, k) is never 
satisfied. If requirement (j, k) is satisfied at stage n for some n, then we are done, since there 
exists a string x in this case such that (i) x G L(M J QBF ® Bn " 1 ) if and only if x & L(7V^ BF ® Bn - 1 ), 
(ii) B n = B n -\, and (iii) neither Mj nor can query any string of length > e(n) on input x. 
Thus, x G L(Mf) if and only if x £ L(N^), i.e., cannot accept the P A set L(Mj 4 ). So suppose 
requirement (j, A;} is never satisfied, i.e., L(N£) = L(M A ) might now happen. Then, it suffices to 
show that L(N A ) = L(M A ) implies that N A has always easy certificates. Since this holds for all k 
for which can accept L(M A ), we have L(M A ) G (EASY^) A . 

Let Sj k be the first stage such that 

(a) for every x such that |x| > e(sj^) there is at most one n such that 

log \x\ < e(n) < max{pj(\x\),p k (\x\)}, 

(b) all requirements of higher priority than (j, k) that will ever be satisfied are already satisfied. 
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We will now show that N A on input x has easy certificates for every string x accepted by M A . 
We describe an FP A function that, on input x, uses oracle A = QBF©5 to output some accepting 
path of N£{x) if x G L(M A ). 

On input x, if \x\ < e(sj t k), then uses a finite table to find and output some accepting path of 
N A {x) whenever x G L(M A ). Otherwise (i.e., if |sc| > e{sj^)), calculates the smallest n such 
that e(n) > log \x\. Then, fk builds a table, T, of all strings that were added to B before stage n, 
i.e., T = B <e( - n \ by querying its oracle B about all strings of lengths e(0), e(l), . . . , e(n — 1). 
Since e(n — 1) < log \x\, only queries are required in this brute-force search. We have to 

consider two cases. 

Case 1: e(n) > max{pj(|x|),pfc(|x|)}. Then, neither M A (x) nor N A {x) can query their oracle 
about any string of length > e(n). Therefore, the computation of Mj and Nf. on input x with 
oracle QBF © T is the same as with oracle QBF © B. Hence, fk can run Mj on input x 
to determine whether M A would accept x. If it rejects x, then fk can output an arbitrary 
string, and we are done. If M^ BF ® T accepts x, then fj, exploits the PSPACE-completeness of 
QBF to construct the lexicographically first accepting path of A^^ BF ® B (x), say p, bit by bit 
via prefix search, where QBF uses table T to answer every oracle call of ivf BF ® B (x) to B. It 
follows that p is a valid accepting path of N A (x) if x G L(M A ). fk outputs p. 

Case 2: e(n) < maxlj^dxl),^^!)}- In this case, also strings of length e(n) can be queried by 
M A (x) or N A (x). Clearly, iV^ BF ® T accepts x if and only if M^ BF ® T accepts x, as otherwise 
requirement (j, k) would have been satisfied at stage n, contradicting our supposition that 
(j, k) is never satisfied. Indeed, since (j, k) is the smallest unsatisfied requirement at stage n 
by (b) above and since x meets condition @ above by (a), the equivalence 

(x G L(Mf F ® r ) ^ x L(iV fc QBF ® T )) 

would enforce the vulnerability of (j, k) at this stage. Now, fk simulates M A (x) and outputs 
an arbitrary string if it rejects. Otherwise (i.e., if x G L(M A )), fk runs MQ BF ® T (x), call this 
computation q. There are two subcases. 

Case 2.1: The computation of M A (x) exactly agrees with q. Then, there exists an accepting 
path of iV^ BF ® r (x), and A again employs QBF to construct the lexicographically first 
accepting path of N^ BF ® T (x), call this path p. If p were reliable w.r.t. oracle A, then 
fk could simply output p, and we were done. However, p is not reliable, since T and B 
might differ, so fk has to check the validity of p. By our choice of Sj.k, there exists (ac- 
cording to (a) above) at most one n such that log |x| < e(n) < max.{pj(\x\),pk(\x\)}. 
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Hence, T can lack at most one length e(n) string of B that might be queried in the run of 
N A (x). Now, fk checks whether p is a valid certificate of N A (x) by simply checking 
whether all answers given along p are correct according to the B part of f^s oracle. 
There are two subcases of Case 2.1. 

Case 2.1.1: All strings z queried along p receive the answer "yes" if and only ifz^B. 
We conclude that p is a valid certificate of N A (x). fk outputs p. 

Case 2.1.2: There exists a string z that is queried along p, but receives a wrong "no" 
answer according to B, i.e., z € B. Then, has detected that z is the one string 
of length e(n) in B — T. So, adding z to T, we now have T = B- e( - n \ f\ again 
employs QBF to construct the lexicographically first accepting path of N^ BF ® T (x), 
say p', which now must be a valid certificate of N A (x). fk outputs p'. 

Case 2.2: The computation of M A (x) differs from q. The only way this could happen, how- 
ever, is that the one missing string in T, z € B- e ^ — T, is queried on q, but has re- 
ceived a wrong "no" answer from T. Then, as in Case 2.1.2, fj~ has identified z and 
can complete table T by adding z to T. Now, T = B- e ( n \ and fk can proceed as in 
Case 2.1.2 to find and output a valid certificate of N A {x) if x is accepted by M A (via 
once more employing QBF in the prefix search to construct the lexicographically first 
certificate). 

Since max{pj(|3;|),pfe(|x|)} < e(n + 1) by (a) above, no string of length > e(n + 1) can be 
queried by Nk or Mj on input x, and thus oracle extensions at stages > n + 1 cannot effect the 
computation of N^ BFeBn (x) or M^ BF<sBn (x). This completes the proof. □ 

Remark 4.6 1. The argument given in the above proof could almost seem to even prove that 
there exists some oracle A relative to which P A ^ NP A and NP A C (EASY^) A , i.e., 
P A NP A and P A = ~NP A , which clearly is impossible. In fact, our argument would not 
work for NP in place of P, for the following subtle reason. When we define the vulnerability 
of requirements of the form (j, k) with j ^ kin terms of pairs of two nondeterministic oracle 
machines Nj and Nk, and modify our argument appropriately, then the FP A function fk has 
no way of telling whether or not the input x is accepted by N A (as we have no P A algorithm 
as in the above proof) and therefore is in serious trouble when it is trying to construct a valid 
certificate of N A (x). 



2. Fortnow and Rogers [ ]FR94 ] have presented an oracle A such that the reverse of our arrow (5) 



in Figure ^| fails relative to A, and in fact they show that P C EASYy holds relative to any 
"sparse generic oracle with the subset property." In fact, regarding their oracle A, Fenner et 
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al. [ FFNR96 ] note that since they even prove that an intermediate condition (of our arrow (5)) 
cannot imply P ^ NP n coNP, they have a statement slightly stronger than that the reverse of 
arrow (5) fails relative to A. 

Of course, the existence of relativized worlds A in which a statement X A fails should not be 
viewed as evidence that X fails in the unrelativized world. Rather, the existence of such relativized 
worlds should be viewed as evidence that most standard proof techniques lack the power to prove 
that X holds in the unrelativized world (see, e.g., [ |M190| , For94, |Har85 ] for discussions of how to 
interpret relativized results). We suggest as an open question the issue of whether even stronger 
implications than those of Figure || can be established. 

As a final remark, an anonymous referee mentioned the interesting open topic of definitions 
analogous to ours, except with the path-finding operator being probabilistic (either error-bounded 
or error-unbounded), rather than deterministic. 
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